 Michael Bolin
|
4544dd25b6
|
merge commit for archive created by Sapling
|
2026-03-06 15:17:38 -08:00 |
|
|
Michael Bolin
|
2dc364500b
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:17:07 -08:00 |
|
|
Michael Bolin
|
099a061460
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:17:07 -08:00 |
|
|
Michael Bolin
|
b483d481e9
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:17:07 -08:00 |
|
|
Michael Bolin
|
85a06286ce
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:15:48 -08:00 |
|
|
Michael Bolin
|
b1a6de9f00
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:15:14 -08:00 |
|
|
Michael Bolin
|
b2ddc1c49f
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 15:14:40 -08:00 |
|
|
Michael Bolin
|
cf4dd5b730
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 15:14:39 -08:00 |
|
|
Michael Bolin
|
0acad009b2
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 15:14:19 -08:00 |
|
|
Michael Bolin
|
5c6f557faa
|
merge commit for archive created by Sapling
|
2026-03-06 15:02:05 -08:00 |
|
|
Michael Bolin
|
bfbe45d517
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
487e6354ba
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
9e76f2b75b
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
f7776662b5
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
8681522c0b
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
2e6098cd7b
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
c58266bb80
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
eb5869bec3
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
39b15e3f45
|
config: add v3 filesystem permission profiles
|
2026-03-06 15:01:32 -08:00 |
|
|
Michael Bolin
|
41b8f45b83
|
Merge ee0e8728fd into sapling-pr-archive-bolinfest
|
2026-03-06 14:45:48 -08:00 |
|
|
Michael Bolin
|
751e9463e4
|
merge commit for archive created by Sapling
|
2026-03-06 14:41:57 -08:00 |
|
|
Michael Bolin
|
ee0e8728fd
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
4ff802ef6b
|
config: add v3 filesystem permission profiles
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
83067a18e7
|
protocol: keep root carveouts sandboxed
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
66c5b0d249
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
d9845f56ca
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
a7965133a0
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
dc40ece846
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
bee47a2643
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
45efe16881
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
b08d15058b
|
merge commit for archive created by Sapling
|
2026-03-06 14:33:54 -08:00 |
|
|
Michael Bolin
|
5da322b66e
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
e5f38536d6
|
protocol: keep root carveouts sandboxed
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
7922fbda11
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
95a0381b79
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
42b9605ed5
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
f2323cabd4
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
b8dba89fa1
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
9e411471fb
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
fac9b40c0b
|
config: add v3 filesystem permission profiles
|
2026-03-06 14:12:24 -08:00 |
|
|
Michael Bolin
|
04fad892e8
|
merge commit for archive created by Sapling
|
2026-03-06 13:39:46 -08:00 |
|
|
Michael Bolin
|
c19cf3802f
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:39:40 -08:00 |
|
|
Michael Bolin
|
bae193f31e
|
merge commit for archive created by Sapling
|
2026-03-06 13:32:52 -08:00 |
|
|
Michael Bolin
|
f9f81ce99d
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 13:32:12 -08:00 |
|
|
Michael Bolin
|
c16e838f29
|
protocol: keep root carveouts sandboxed
|
2026-03-06 13:32:12 -08:00 |
|
|
Michael Bolin
|
314f4fca8a
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 13:25:11 -08:00 |
|
|
Michael Bolin
|
034d874495
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
6888940e93
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
3cec98b309
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
a8d36af90e
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 13:25:10 -08:00 |
|